Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ef86e5d3551fd12ced59cf602e1d3b4a4f95ce7.cer
File:                     6ef86e5d3551fd12ced59cf602e1d3b4a4f95ce7.cer (raw, json)
Hash identifier:          Ut2Ic6JkGdyTuMc6OKJiNGCWXA6i65AMHZOfT1EKoDo=
Subject key identifier:   DF:43:01:A3:87:F7:98:4D:CC:F5:43:5D:0A:9F:0D:1F:DE:5F:F7:CA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8C3F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2e72f2ef-d093-428f-a6e2-19d45b7b6b30/6ef86e5d3551fd12ced59cf602e1d3b4a4f95ce7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2e72f2ef-d093-428f-a6e2-19d45b7b6b30/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 Oct 2018 15:41:08 +0000
Certificate not after:    Wed 09 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 27962
                          IP: 200.91.40.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16303094 (0xf8c3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 16 15:41:08 2018 GMT
            Not After : Oct  9 05:00:00 2024 GMT
        Subject: CN=6ef86e5d3551fd12ced59cf602e1d3b4a4f95ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:45:91:07:0c:35:3b:f2:79:57:ef:cd:a0:
                    4c:27:b9:2d:a2:09:64:a4:ca:70:4e:38:2c:cb:8d:
                    13:83:48:1a:88:00:58:d9:c0:91:d0:ba:3a:cd:17:
                    ab:2b:89:aa:18:88:65:35:ee:6c:5e:65:3d:d8:6c:
                    c1:47:3b:1b:c5:ea:f0:ab:a8:3d:76:68:24:b3:ac:
                    1d:99:64:15:a0:ca:10:93:c0:3e:80:91:87:17:cc:
                    cb:73:2a:59:25:d8:10:4f:e6:4f:55:9f:fb:0c:e3:
                    5a:87:b3:c1:c6:4b:f8:e5:0b:aa:23:f4:d8:a6:39:
                    89:ff:13:1e:34:86:c1:b8:f4:5b:82:a0:d4:c4:0f:
                    da:62:bc:f8:c1:9d:61:91:9f:ff:c8:94:49:c1:df:
                    fe:d8:09:fd:4a:6e:37:00:d5:3d:03:e6:6c:1b:4f:
                    a0:de:5d:f4:96:76:07:d8:78:b2:40:08:3b:49:98:
                    dd:c6:1f:8e:c0:f9:ce:c1:5e:34:cb:b4:05:b0:c3:
                    57:6b:16:87:38:56:20:9c:92:f0:5f:16:93:72:22:
                    f2:69:fa:ba:31:f8:c6:9d:8b:ef:70:54:2b:b4:e2:
                    9c:d7:c4:90:58:fb:42:c9:c1:b6:f8:11:c8:55:c3:
                    9e:c8:0d:9b:be:a1:64:b0:27:e0:fa:47:c8:a9:b0:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:01:A3:87:F7:98:4D:CC:F5:43:5D:0A:9F:0D:1F:DE:5F:F7:CA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2e72f2ef-d093-428f-a6e2-19d45b7b6b30/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2e72f2ef-d093-428f-a6e2-19d45b7b6b30/6ef86e5d3551fd12ced59cf602e1d3b4a4f95ce7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.40.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27962

    Signature Algorithm: sha256WithRSAEncryption
         93:bf:4d:3f:34:51:4f:d6:ba:77:79:4c:35:8d:17:cd:41:16:
         b9:e7:3c:f6:bb:39:06:e3:4f:0a:c5:a2:71:3b:fe:04:5d:9e:
         75:0f:32:58:e7:df:dc:2a:ba:24:7a:59:15:33:bd:62:0e:24:
         87:95:1a:e9:e6:cd:92:b2:3b:39:0e:a5:b7:a2:f4:81:22:c5:
         d2:f1:ea:9a:e7:e9:d3:b0:70:ca:f2:3a:ec:bd:04:4a:e0:03:
         fd:ad:2f:97:2a:bb:b7:c9:01:a4:6b:d4:b5:82:c5:55:4c:9c:
         46:1e:b2:55:6c:86:ed:a6:02:c8:63:0c:d8:68:9d:02:a9:64:
         09:b0:31:59:90:8c:fd:fc:a0:c3:b5:ce:82:34:8e:4c:c7:6b:
         47:af:07:88:35:20:f3:b4:e2:fc:19:d6:45:f4:ec:6b:84:22:
         84:0a:69:97:dd:04:70:15:75:7d:e9:60:97:91:96:f7:13:58:
         f3:ec:db:a3:c2:9c:78:0b:7f:ba:fd:33:47:d0:5a:6b:43:d0:
         8a:1e:df:ff:c1:58:5c:09:33:ab:f9:25:e8:64:7e:48:9b:73:
         c6:d4:87:40:ee:87:c3:cc:28:78:e2:0c:fd:11:6c:b6:a5:10:
         fe:b7:a8:37:e9:d0:bb:20:92:e0:63:e1:07:1e:22:3e:af:e7:
         22:d2:80:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----